We provide IT Staff Augmentation Services!

Locomotive Engineer Resume

OBJECTIVE:

  • My passion for Information Security is calling me to come back home, I am looking for a challenging career opportunity that will benefit the company in utilizing my skills with your needs. I am a strong team player open to change and a fast learner that is always eager to learn something new.

SKILLS & ABILITIES:

projects mananged

  • Bi - Annual review for certification in the following categories; identity management and provisioning; incident reporting and response; data encryption; information classification; incident and patch management; security performance reporting; technical audits, control assessments and remediation tracking.
  • User access provisioning proper documentation review to ensure it meets retention and any other applicable policy enforced, RBAC review to ensure access is granted on a need to have and ensure segregation of duties are strictly enforced.

Leadership

  • Provided leadership to comprehensively document and test internal operational controls, identify security gaps and remediate solutions. Provided guidance to the firm in meeting regulatory requirements and satisfying compliance with industry standards for information protection - including the Sarbanes-Oxley Act, SAS 70 audits, SSAE 16, COBIT, COSO, ISO, GBLA, and FDIC / OCC regulations. Additional engagements encompassed in-depth technical assessments of information security and related risks; technology infrastructure reviews; security requirements analysis, network design and implementation; security architecture and policy development; financial systems application audits; business continuity, incident response and disaster recovery planning; and business process analyses.

EXPERIENCE:

Locomotive Engineer

Confidential

Responsibilities:

  • Provide Customer Service supporting the business infrastructure for internal and external clients to meet or exceed our Service Level Agreements (SLA).
  • RACF, TSO, UNIX, and other mainframe application security support and administration; user provisioning, password reset/revoke as well as review violation reports.
  • SME for Windows AD user provisioning, network drive attribute admin (NTFS), SharePoint administration and reporting.
  • SME support on user provisioning issues to meet SLA agreements.
  • Generate activity reports on weekly and monthly basis as required for audit purposes.
  • SAP BCM User Administration
  • Access Certification and reporting processes. This set of documents provides the instruction and guidance necessary for preparing, supporting and fulfilling the periodic IT Security access reviews as mandated by IT Security controls for annual audit review’s, and to meet all applicable auditory compliance policies in place. This included in house application reviews, as well as 3rd party vendor reviews.
  • Extract, migrate data, user access information from application(s), databases, and converted them over to excel utilizing filtered formulas to tailor the data for management to review.
  • Conduct SAS70 and SSAE 16 and other audits on applications used by the business.
  • Generate, and archive activity reports on weekly and monthly basis for access provisioning to meet Information Security records retention policy on access provisioning and proper authorized documentation.
  • Networking across the firm to build relationships for Tier II support, and partner with for resolutions beyond my control.
  • Ability to handle multiple tasks under tight deadlines on a day to day basis, results driven.
  • Participated in the (BCDRP) Business Continuity and Disaster Recovery Planning, established close rapport with business partners; end users to form a stronger DR recovery plan and conduct annual stress testing and Datacenter DR fallback tests to gauge and mitigate any risk currently not in plan with the targeted operations Disaster Recovery model.
  • Perform detailed security audits and make recommendations to management to improve internal and external security. Serve as the primary Information Security liaison between Internal and External auditors for IT Risk audits SSAE 16 / SAS 70 audits; Sarbanes-Oxley (SOX) reviews, FFIEC engagements OCC; internal audit co-sourcing and outsourcing; and due diligence examinations
  • Assist in the development and maintenance of data security policies and procedures guidelines. Researches internal and external regulations to ensure compliance.
  • Perform security risk assessments to identify risks and recommend compensating controls
  • Assisting in writing and implementing security-related policies, procedures, and standards.
  • Investigating and documenting security incidents and reporting them to management
  • Daily review, oversight of requests for user access to Bank systems/platforms to ensure compliance
  • Manage information security projects to help automate and enhance provisioning processes
  • RBAC-related audit reviews and implementation of segregation of duties roles for all financial assets across the firm

LAN Security Administrator

Confidential

Responsibilities:

  • Provided Security Account Administration support to 45,000+ users account within Active Directory, Novell, Windows NT, and Lotus Notes platforms.
  • Provide Level 1 Support to users on access control via phone, email, chat or remote.
  • Troubleshoots user access issues, including determining cause and implementing resolution.
  • Active Directory, Novell, RACF ID and other platform user provisioning, on boarding, off boarding.
  • User access certification, extract and migrate data (Microsoft Office: Word, Excel, Access) to create user report list for management certification of end users via SharePoint.
  • Bank system user access provisioning on 300+ applications used by the firm
  • Lotus Notes Administration, MS Exchange - new setups, replicate mailboxes and convert mailbox templates.
  • Email configuration and support administration for active directory, blackberry and lotus notes
  • Performed daily tasks in Active Directory and Novell-account and group creations/modifications, permission, nesting, shared data access control.
  • Provide password reset in accordance to company policy and procedures for all applications used by the business.
  • Network shared drive access and folder permissions.
  • Organized a detailed report to keep track of all new hires being on boarded, off boarded, as well as the overall progress to ensure access was provisioned/ deprovisioning on time.
  • Generate activity reports on weekly and monthly basis as requested for audit purposes.
  • Generate, and archive activity reports on weekly and monthly basis for access provisioning to meet Information Security records retention policy on access provisioning and proper authorized documentation.
  • Ensure we met the SLA in accordance with the business guidelines.
  • Prioritized workload to ensure that escalated requests are completed in a timely fashion.
  • Maintain appropriate documentation and inventory of all account creating, modification and termination for reporting and audit purposes.
  • Establish and maintain adequate audit trails to ensure sufficient evidence of computerized business activities exists to reconcile accounts, to detect frauds, to quickly resolve any issues or questions that should rise and to maintain a secure and reliable information system infrastructure to meet federal, state and local as well as international regulatory.
  • Managed remedy ticket application to expedite queues based on severity of issue reported to meet customers SLA agreements.

Hire Now